Device for monitoring a plurality of systems of an aircraft including a display displaying tasks already performed

ABSTRACT

A device for monitoring a plurality of systems of an aircraft including a monitoring unit configured to monitor the systems and to detect a failure of at least one of the systems, a display configured to display information output by the monitoring unit including at least one failure condition including a list of tasks to perform to address a detected failure including tasks already performed and tasks to be performed, and an input device configured to input information indicating that a task has been completed.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation application of U.S. application Ser.No. 10/073,983 (now U.S. Pat. No. 6,697,718), filed on Feb. 14, 2002,which claims priority under 35 U.S.C. § 119 to French Patent Application01 02570, filed on Feb. 26, 2001, the entire contents of both which areincorporated herein by reference.

BACKGROUND OF THE INVENTION Field of the Invention

The present invention relates to a device for monitoring a plurality ofsystems of an aircraft, especially of a transport aircraft.

More particularly, although not exclusively, the monitoring device is acentralized device of the ECAM (Electronic Centralized AircraftMonitoring) type which automatically monitors a plurality of systems(engines, control surfaces, etc.) of the aircraft and which informs thecrew of the status of these systems.

It is known that such a monitoring device especially includes at least:

a monitoring device for monitoring the systems and for detecting anyfailure of one of the systems; and

display means linked to the monitoring unit and capable of presenting,on at least one visual-display screen:

information relating to the monitoring of the systems; and

upon detection of a failure of one of the systems, information relatingto the failure, as well as to a corresponding failure-handling procedureincluding a list of actions having to be carried out by at least oneoperator.

In general, the display means present the following types ofinformation, in particular:

block diagrams representing the various systems monitored;

information warning of a possible failure, especially when a particularparameter which is monitored approaches its limit values or exceedsthem. In this case, in general, the display means display a pagepresenting this parameter which, moreover, is highlighted by flashing,to draw the attention of the crew;

messages relating to particular functions (for example, the de-icing ofthe engines) which can be activated temporarily and which are activatedin this instance. These messages are, needless to say, displayed only atthe time when the corresponding functions are still activated; and

regulatory information, such as the thrust of the engines, the quantityof fuel remaining or the aerodynamic configuration, which for their partare displayed permanently.

Moreover, when a failure of a system is detected by such a monitoringdevice, the device:

alerts the crew by audible and/or visual means;

identifies the failure and displays the block diagram corresponding tothe failed system, on the visual-display screen. All the displaysindicated below are formed on the visual-display screen;

checks whether the failure is isolated or whether other systems areaffected by this failure and, if appropriate, displays the list of thesystems which are also affected;

displays the corresponding failure-handling procedure, including aplurality of particular actions which have to be carried out by anoperator or the crew of the aircraft, to isolate the failure and dealwith it so as to be able to carry on with the flight;

manages the failure-handling procedure as and when the operator or thecrew carry out the various actions, deleting an action from thevisual-display screen automatically as soon as it detects that thisaction has been carried out; and

when the failure has been dealt with, displays an operational statusreport for the aircraft, particularly including the limitations to becomplied with (maximum speed, maximum altitude, etc.) for the remainderof the flight, the systems and/or the functions which are inoperative,etc.

Such a monitoring device exhibits a few drawbacks. In particular, whencarrying out a fault-handling procedure which is presented and managedby the monitoring device:

when an action has been carried out, it automatically disappears fromthe visual-display screen. Consequently, among the operators of theaircraft (pilot, co-pilot), the operator who is not occupied with thefailure-handling procedure (and sometimes even the operator who isoccupied with it), does not always know what action or actions has orhave been carried out and deleted, and therefore has trouble inevaluating the actual progress of the failure-handling procedure; and,moreover

since, in the usual way, the carrying out of certain actions is notdetected automatically, that is to say cannot be detected by monitoringdevice, such an action (the carrying-out of which cannot be detected)still remains displayed on the visual-display screen, even if it hasactually been carried out. In this case, the operator or the crew has tomemorize all the actions (which are not detected automatically) which hehas actually carried out, which requires sustained attention on hispart.

SUMMARY OF THE INVENTION

The present invention relates to a monitoring device of the typedescribed above, which makes it possible to remedy the above-mentioneddrawbacks.

To that end, according to the invention, the monitoring device of thetype including at least:

a monitoring unit for monitoring the systems and for detecting anyfailure of one of the systems; and

display means linked to the monitoring unit and capable of presenting,on at least one visual-display screen, information relating to themonitoring of the systems, and, upon detection of a failure of one ofthe systems, information relating to the failure, as well as at leastone corresponding failure-handling procedure including at least a listof actions having to be carried out by at least one operator;

is noteworthy in that the display means, upon detection of a failure andat least throughout the corresponding failure-handling procedure,display, on the visual-display screen, at least:

information identifying the failure-handling procedure;

if appropriate, a list of the actions already carried out relating tothe failure-handling procedure; and

if appropriate, a list of the actions still having to be carried outrelating to the failure-handling procedure, highlighting the next actionhaving to be carried out;

and in that the monitoring device further includes an information meanscapable of being actuated by the operator and allowing the latter toinform the monitoring device, if appropriate, of the carrying-out of atleast one particular action relating to the failure-handling procedure.

Thus, by virtue of the invention, the various operators (pilot,co-pilot, etc.) continuously and precisely know the actions alreadycarried out and those still having to be carried out, and thus the stateof progress of the failure-handling procedure, without having tomemorize these actions, which, needless to say, increases the comfort ofthe operators in the carrying out of these actions, allows them to focustheir attention and their memory on other information, and avoidsunnecessary actions and/or checks.

Moreover, the information which is presented by the display meansprecisely illustrates the actual state of progress of thefailure-handling procedure, since, by virtue of the information means,the operator can inform the monitoring device of the carrying-out of aparticular action (of the above-mentioned undetectable type) which thelatter would not have been able to detect automatically. The monitoringdevice thus knows precisely which are the actions which have beencarried out, either because it has actually detected them being carriedout, or because the operator has informed it that these actions havebeen carried out.

According to the invention, the display means, while a plurality offailure-handling procedures exist, display all the procedures on thevisual-display screen in an order of priority, and the monitoring devicefurther includes a means for indicating, on the visual-display screen,the procedure to be dealt with, that is to say which has to be dealtwith in priority from among all the procedures displayed. This makes itpossible, in a stressful situation, to guide the pilot in carrying outthe procedures. This is particularly advantageous by comparison withcertain usual devices which present the list of the various proceduresto be performed and ask the pilot to choose which one he will deal withfirst.

Furthermore, advantageously, the display means present, on thevisual-display screen, when a failure-handling procedure is terminated,at least one characteristic sign signaling the completion of thisfailure-handling procedure, and the monitoring device further includes adeletion means capable of being actuated by the operator and allowingthe latter to delete from the visual-display screen all the informationrelating to a failure-handling procedure.

Moreover, advantageously, the display means continuously present on thevisual-display screen the new limitations to be complied with by reasonof a failure, as soon as these new limitations are known. Thus, despitethe alterations which might have been generated by the failure, the crewis kept permanently informed of the limitations to be complied with forthe remainder of the flight, which is a guarantee of safety.

It is known that certain failure-handling procedures include conditionalstages, that is to say that the action or actions to be carried out atsuch a (conditional) stage depend on at least one particular condition(for example “if condition X is satisfied, then carry out action A,otherwise carry out action B”). To that end, it is necessary to knowwhether a particular condition is or is not satisfied, or whichcondition among several is satisfied. However, the monitoring device isnot always in a position to identify the actual condition automatically.In such a situation, with the usual monitoring devices, it is up to theoperator to determine the actions to be carried out and those to beignored.

According to the invention, the monitoring device further includes aselection means capable of being actuated by the operator and allowingthe latter, in a conditional failure-handling procedure including aplurality of conditions, to select one of the conditions, and thedisplay means present, on the visual-display screen, the variouspossible conditions and highlight the actions to be carried out for aparticular condition, on the visual-display screen, after the selectionof this condition by the selection means. Consequently, it is sufficientfor the operator to select the appropriate condition and the displaymeans present him with the actions having to be carried out for thecondition thus selected. The function of help with the handling of thefailure is thus enhanced by the present invention.

Moreover, the monitoring device advantageously includes a cancellationmeans capable of being actuated by the operator and allowing the latter,if appropriate, to cancel the previous selection of a condition in aconditional failure-handling procedure.

Moreover, advantageously, the monitoring device further includes adeletion means capable of being actuated by the operator and allowingthe latter to delete information presented on the visual-display screen,and the display means highlight, on the visual-display screen, among theinformation which is presented there, the information which is capableof being deleted by the deletion means. Thus, the operator knows exactlythe information which he can delete with the aid of the deletion means.This makes it possible to prevent him accidentally deleting informationwhich may be useful for the remainder of the flight.

Furthermore, advantageously, the monitoring device in accordance withthe invention further includes an information means capable of beingactuated by the operator and allowing the latter to inform themonitoring device of the occurrence of a failure, and an interrogationmeans capable of being actuated by the operator and allowing the latterto ask the monitoring device to have the display means present, on thevisual-display screen, the failure-handling procedure relating to thefailure. This makes it possible to take into account failures orincidents which cannot be detected by the monitoring device, but whichcan be detected by an operator, such as the presence of a crackedwindscreen, for example.

In one particular embodiment, the monitoring device in accordance withthe invention further includes an interrogation means capable of beingactuated by the operator and allowing the latter to requestsupplementary information relating to a failure, and the display meanspresent, on the visual-display screen, supplementary informationrelating to a failure, in response to an actuation of the interrogationmeans by the operator.

Furthermore, advantageously, the display means present, on thevisual-display screen, for a failure-handling procedure, if appropriate,deferred actions corresponding to actions having to be carried outsubsequently, and the monitoring device further includes a validationmeans capable of being actuated by the operator and allowing the latterto validate these deferred actions so as to carry them out (immediately)upon the validation.

In one particular embodiment, the monitoring device in accordance withthe invention further includes a database including lists of operationsto be verified (“check lists”) and means, automatic or manual, making itpossible to control the display means so that they present, on thevisual-display screen, at least one of the lists. These are lists ofoperations to be verified, which are generally drawn up on the basis ofrecommendations made by the constructor of the airplane, and which areadapted to the specific wishes of the airlines. These lists ofoperations to be verified are usually found on a paper medium, and theirpresentation in accordance with the invention on the visual-displayscreen makes it possible to facilitate reading them and making use ofthem.

The monitoring device in accordance with the invention preferablyfurther includes means for automatically correcting these lists ofoperations to be verified, upon a failure, so as to take into accounteffects generated by this failure on the lists.

Furthermore, for reasons of safety, the monitoring device furtherincludes a validation means capable of being actuated by the operatorand allowing the latter to validate information which he has supplied tothe monitoring device.

Advantageously, moreover, the monitoring device further includes:

a recall means capable of being actuated by the operator and allowingthe latter:

by a first actuation, to recall to the visual-display screen, ifappropriate, the last procedure deleted; and

by a second actuation, to recall to the visual-display screen, ifappropriate, all the procedures deleted since the start of the flight ofthe aircraft; and/or

a recall means capable of being actuated by the operator and allowingthe latter to recall to the visual-display screen, if appropriate, allthe deferred actions which have been deleted and which have not yet beencarried out.

BRIEF DESCRIPTION OF THE DRAWINGS

A more complete appreciation of the invention and many of the attendantadvantages thereof will be readily obtained as the same becomes betterunderstood by reference to the following detailed description whenconsidered in connection with the accompanying drawings, wherein:

FIG. 1 is the block diagram of a monitoring device in accordance withthe invention;

FIG. 2 diagrammatically shows an exemplary embodiment of a monitoringdevice in accordance with the invention; and

FIGS. 3 to 8 diagrammatically show the different presentations ofinformation on a visual-display screen of a monitoring device inaccordance with the invention, making it possible to give a goodexplanation of the characteristics and the advantages thereof.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

FIGS. 2 to 8 include indications such as they may appear in reality on amonitoring device of an airliner. That is why these indications appearin the form of words in English or of abbreviations originating fromEnglish, as used in reality and with which the person skilled and theart is more familiar than with indications in French. These words orthese abbreviations are well known and understood by the users (pilot,etc.) and the manufacturers of monitoring devices for airliners, whichis why they have not been transcribed into French in the followingdescription unless such a presentation proves to be useful or necessaryto explain the particular features of the present invention.

The monitoring device 1 in accordance with the invention and representeddiagrammatically in FIG. 1 is intended for the monitoring of a pluralityof systems, such as the engines, the control surfaces and/or thelighting of an aircraft, in particular a civil transport airplane. Thismonitoring device 1 which is, preferably, a centralized device of theECAM (Electronic Centralized Aircraft Monitoring) type, informs the crewof the aircraft of the status of these systems.

Such a monitoring device 1 comprises, in a known way:

a monitoring unit 2 which comprises:

a plurality of sensors or of monitoring means C1 to Cn which monitor theoperation of the various systems, especially by measuring particularparameters, such as the thrust of the engines, for example. Thesemonitoring means C1 to Cn can especially be integrated into the systems;and

a central unit 3 which includes a computer, which is linked by links e1to en, respectively to the monitoring means C1 to Cn, and which managesor handles the information received from the monitoring means C1 to Cn,

the monitoring unit 2 being capable of detecting a failure of one of thesystems, either directly by a monitoring means C1 to Cn, or fromprocessing carried out by the central unit 3; and

display means 4 of the usual type, which are linked to the central unit3 by a link 5 and which are capable of presenting, on at least onevisual-display screen 6:

information relating to the monitoring of the systems; and

upon detection of a failure of one of the systems, information relatingto the failure, as well as to a corresponding failure-handling procedureincluding a list of actions having to be carried out by at least oneoperator.

The visual-display screen 6 may include several visual-display windows7A, 7B. It preferably includes two superimposed windows 7A and 7B.

In FIG. 2, in a window 7A have been represented types of informationlikely to be presented by the display means 4 to the crew, in theabsence of a failure of the various systems which are monitored.

In this instance, what is involved is, by illustration:

regulatory information which is permanently displayed, such as:

the rate of climb, CLB;

the rotational speed N1 of the low-pressure module of the engines;

the exit temperature of the gases from the engines, EGT (Exhaust GasTemperature);

the rotational speed N2 of the high-pressure module of the engines;

the flow of fuel, FF (Fuel Flow), the parameters N1, EGT, N2 and FFbeing presented for each of the four engines of the aircraft; and

the mass of fuel remaining, FOB (Fuel On Board); and

messages giving information on the existence of particular functionswhich are activated temporarily, such as indicator lamps asking thepassengers to fasten their seatbelts (SEAT BELTS) and not to smoke (NOSMOKING).

Furthermore, when a failure of a system is detected, the monitoringsystem 1 normally carries out the following operations:

it alerts the crew via audible and/or visual means, not represented;

it identifies the failure;

it checks whether the failure is isolated or whether other systems areaffected by this failure and, if appropriate, displays the list of thesystems which are also affected;

it displays the corresponding failure-handling procedure, including aplurality of particular actions, which have to be carried out by anoperator (pilot, co-pilot, etc.) or the crew of the aircraft, to isolatethe failure and to deal with it so as to be able to carry on with theflight;

it manages the failure-handling procedure as and when the operator orthe crew carry out the various actions, as detailed below; and

when the failure has been dealt with, it displays an operational statusreport on the airplane especially including the limitations to becomplied with (maximum speed, maximum altitude, etc.) for the remainderof the flight, the systems and/or the functions which are inoperative,etc.

To do this, according to the invention:

the display means 4, upon the detection of a failure and at leastthroughout the corresponding failure-handling procedure, present, on thevisual-display screen 6, as can be seen in FIGS. 3, 5 and 6 showing thewindow 7A, at least:

information IF1 identifying the failure-handling procedure;

if appropriate, a list L1 of the actions already carried out relating tothe failure-handling procedure; and

if appropriate, a list L2 of the actions still having to be carried outrelating to the failure-handling procedure, highlighting the nextactions having to be carried out; and

the monitoring device 1 further includes an information means 8A capableof being actuated by an operator (pilot, co-pilot, etc.) and allowingthe latter to inform the monitoring unit 1, if appropriate, that atleast one particular action relating to the failure-handling procedurehas been carried out.

Thus, by virtue of the invention, the various operators (pilot,co-pilot, etc.) continuously and precisely know the actions alreadycarried out (list L1) and those still having to be carried out (listL2), and thus the state of progress of the failure-handling procedure,without having to memorize these actions, which, needless to say,increases the comfort of the operators in the performance of theseactions, allows them to focus their attention and their memory on otherinformation, and avoid unnecessary actions and/or checks.

Moreover, the information which is presented by the display means 4precisely illustrates the actual state of progress of thefailure-handling procedure, since, by virtue of the information means8A, the operator can inform the monitoring device 1, as appropriate, ofthe carrying out of all the actions (of the “undetectable” type) whichthe latter would not have been able to detect automatically. Themonitoring device 1 thus knows precisely which are the actions whichhave been carried out, either because it has actually detected thembeing carried out (the monitoring unit 3 can usually detect the effectsgenerated by the majority of the actions capable of being carried out byan operator), or because the operator has informed it that these actionshave been carried out.

The information means 8A corresponds to an actuating element such as akey, a push button or a thumb wheel, for example, a keyboard 9 which isat the disposal of the operator and which is linked by a link 10 to thecentral unit 3. This keyboard 9 includes other actuating elements 8B to8L which also can be actuated by the operator and which will bespecified below.

In FIG. 2 has been represented a preferred, but not exclusive, exampleof a keyboard 9 including a plurality of actuating elements, some ofwhich will be detailed below.

The information IF1 identifying the failure-handling procedure beingcarried out (or to be carried out) is indicated and highlighted by anappropriate means 11, for example a cursor of triangular shape, which isplaced at the same level as this procedure information IF1. Needless tosay, other means of highlighting could be provided in supplement or in avariant thereof, such as a change of color or of brightness or analteration to the graphics, for example. According to the invention,when there are a plurality of procedures in existence, the means 11identifies the procedure which has to be followed as a priority, asrepresented in FIG. 6, for example.

At the same time as they display the above-mentioned information on thewindow 7A relating to the failure-handling procedure, as represented inFIG. 3, the display means 4, upon detection of a failure, can presentthe block diagrams S1 and S2 of the systems which have failed, in thewindow 7B, as shown in FIG. 4.

FIGS. 3, 5, 6 and 7 illustrate various stages of the samefailure-handling method. Thus:

at the stage of FIG. 3, the failure of a system (in this instance, byillustration, the overheating (OVHT) of the hydraulic circuit) has justbeen detected and the failure-handling procedure IF1, as well as thelist L2 of the actions A1 to A4 then having to be carried out, aredisplayed. These actions are, in the present example, the shutting-offof the pumps A and B of the engines 1 and 2. With no action yet havingbeen carried out, the list L1 does not contain any element and it istherefore not displayed. Moreover, the next action A1 to be carried out(“GREEN ENG1 PUMP A”, that is to say the shutting-off of the pump A ofthe engine 1) is highlighted by a double-arrow cursor 12. Other normalmeans for highlighting are possible, needless to say;

at the stage of FIG. 5, the first action A1 has been carried out. Thecarrying-out of this action A1 makes it possible to create the list L1.Moreover, in the window 7B of the visual-display screen 6 simultaneouslydisplaying the block diagrams S1 and S2, the shutting-down of the pump Ais highlighted, in particular by a change of color and/or of thicknessof the lines of the block diagrams, as can be seen in the case of blockdiagram S1 in FIG. 4. In FIGS. 3, 5 and 6, lists L1 and L2 exhibitdifferent line thicknesses. It is possible, needless to say, to useother known means (color difference, especially) to differentiate theselists L1 and L2. The cursor 12 is moved automatically on to thefollowing action A2 to be carried out. The above-mentioned operationsare repeated for all the actions A1 to A4;

at the stage of FIG. 6, all the actions A1 to A4 of the failure-handlingprocedure IF1 have been carried out. List L2 has therefore disappeared.The display means 4 furthermore present an indicator 13A and, in thisinstance a solid (vertical) bar which is provided beside the informationIF1 and L1, which informs the operator of the conclusion (that is to sayof the complete performance) of the failure-handling procedure IF1. Thisindicator 13A also indicates to the operator that all the information(namely the procedure IF1 and the list L1) which was placed at its levelcan be deleted by the operator, by the actuation of a particulardeletion means 8B. This deletion means 8B may, for example, include the“CLR” key of FIG. 2. As can be seen, other indicators of this type 13B,13C and 13D (vertical bar) are arranged beside other information IF2,IF3 and IF4. These indicators 13A, 13B, 13C and 13D inform the operatorthat he can successively delete each group of corresponding informationby starting from the top (IF1 and L1, then IF2, then IF3, then IF4), bysuccessive actuation of the deletion means 8B. Thus, the operator isperfectly aware of the information which he can delete with the aid ofthe deletion means 8B. This makes it possible to prevent himaccidentally deleting information which may be useful for the remainderof the flight. Among the indicators 13A to 13D, only the indicator 13Ais solid, since only the corresponding information or operation (IF1 andL1) has been carried out. It will be noted that the information IF2 isfailure information (absence of pressure), a failure which is generatedby the carrying-out of actions A1 to A4 (shutting-off of the pumps), andinformation IF3 makes it possible to indicate the elements (F/CTL″:“Flight Control”, namely the piloting control surfaces) which areaffected by this failure. As for the information IF4, this relates to adeferred procedure (“Deferred Proc”), which will be explained below;

at the stage of FIG. 7, the procedure IF1 and the list L1 have beendeleted, in response to one (and only one) actuation of the deletionmeans 8B.

Moreover, according to the invention, the monitoring unit 2automatically determines, and the display means 4 present (alsoautomatically) on the visual-display screen 6, for example in the window7B, if appropriate, the new limitations which are generated by reason ofthe failure. These new limitations are presented continuously as soon asthey are known (hence for all of the rest of the flight), as illustratedpartially in FIG. 8 on which has simply been indicated the space(“LIMITATIONS”) where these limitations will be noted, without giving anexample thereof.

Furthermore, according to the invention, the monitoring device 1 furtherincludes a selection means 8C capable of being actuated by an operatorand allowing the latter, in a conditional failure-handling procedurewhich includes, in the usual way, a plurality of conditions, to selectone of the conditions, and the display means 4 present, on thevisual-display screen 6, the various possible conditions, and, asappropriate, the corresponding actions, and highlight, on thevisual-display screen 6, after the selection of a particular conditionby the selection means 8C, the actions to be carried out for thiscondition. To that end, they may cause only the actions to be carriedout to appear, or may differentiate (for example, via a set of colors)the actions to be carried out from those to be ignored.

Consequently, by virtue of the invention, it is sufficient for theoperator to select the appropriate condition, and the display means 4present him with the actions having to be carried out for the conditionthus selected. The function of help with the handling of the failure istherefore enhanced by the present invention.

Moreover, the monitoring device 1 includes a cancellation means 8Jmaking it possible to cancel the selection of a condition, which theoperator has just made, in a conditional failure-handling procedure. Toimplement this cancellation function, which can be called “UNDO”, forexample, the operator may have available a box to be ticked in front ofeach row of the screen corresponding to an (IF ( . . . )) condition. Heselects a condition by clicking in a box. The latter is then enabled anda symbol, such as “✓”, is displayed within this box. To implement the“UNDO” function, the pilot clicks on the enabled box containing thesymbol “✓”. The latter is then disabled and the displaying of the symbolis deleted. The corresponding condition is then no longer selected.

It is also possible to provide a recall means 8K which can be called“RECALL”, for example, capable of being actuated by the operator andallowing the latter:

by a first actuation, to recall to the visual-display screen 6 the lastprocedure deleted, if appropriate; and

by a second actuation, to recall to the visual-display screen 6 all theprocedures deleted since the start of the flight of the aircraft, ifappropriate.

The monitoring device 1 in accordance with the invention moreoverincludes:

an information means 8D specified below, capable of being actuated bythe operator and allowing the latter to inform the monitoring device 1of the occurrence of a failure or of an incident, which cannot bedetected by the monitoring means C1 to Cn, but, on the other hand, bythe crew, such as the cracking of the windscreen or the presence of abomb on board the aircraft, for example; and

an interrogation means 8E capable of being actuated by the operator andallowing the latter to ask the monitoring device 1 for the display means4 to present the failure-handling procedure relating to this failure orthis incident, on the visual-display screen 6.

The information means 8D is preferably formed in such a way as to allowmanual input of the failure or of the incident by a menu.

Moreover, according to the invention, the monitoring device 1 takesaccount of all the failures, even those indicated manually by theoperator, when it draws up the operational status report on the aircraftand when it calculates the new limitations.

For reasons of safety, a validation means 8F can be provided,necessitating manual validation on the part of the operator of thefailure information which he has entered into the central unit 3 via theinformation means 8D.

In the context of the present invention, this validation means 8F or asimilar validation means may also be designed to oblige the operator tocarry out the validation of all the information which he has input intothe monitoring device 1 or at least some of it, this information notthen being taken into account by the monitoring device 1 unless it hasactually been validated by the operator.

The monitoring device 1 in accordance with the invention moreoverincludes an interrogation means 8G, for example the “MORE” key of thekeyboard 9 of FIG. 2, capable of being actuated by the operator andallowing the latter to request additional information relating to afailure. The display means 4, in response to such an actuation of theinterrogation means 8G, then present, on the visual-display screen 6,for example in a particular region of the window 7B having the header“More Info”, as represented in FIG. 8, additional information relatingto the failure, and in particular information on the failure, on whathas happened and/or on the limitations generated by this failure.

As indicated above with reference to FIG. 6, the display means 4 may, byinformation, on the visual-display screen 6, present a deferredprocedure IF4 (“Deferred Proc”) including actions having to be carriedout subsequently, for example during the approach (“APP”: Approach”) orthe landing (“LDG”: “Landing”). These actions are presented (forexample, in gray) so that the operator knows that they are not to becarried out for the moment.

However, the monitoring device 1 includes a particular validation means8H, which is capable of being actuated by the operator and which allowsthe latter to validate these deferred actions (which may, for example,change color (blue) when they are validated), so as to carry them outimmediately upon the validation.

This makes it possible to carry out the deferred actions (in cooperationwith the monitoring device 1) at any moment in the event of necessity,for example when a failure occurs during the approach.

The monitoring device 1 may, moreover, include a recall means 8L whichmakes it possible to recall all the deferred actions which have beendeleted from the screen 6 by the crew members (for clarity of thedisplay) and which have not yet been carried out.

In one particular embodiment, the monitoring device 1 in accordance withthe invention further includes a database 14 represented in FIG. 1 andincluding lists of operations to be verified or checked (of the “checklists” type) which are capable of being displayed by the display means4.

This relates to lists of operations to be verified which are generallydrawn up on the basis of recommendations made by the constructor of theairplane, and which are adapted to the specific wishes of the airlines.These lists are usually found on a paper medium, and their presentationin accordance with the invention on the visual-display screen 6 makes itpossible to facilitate reading them and making use of them.

These lists may be called up according to two different modes:

either manually by an actuation means 8I capable of being actuated by anoperator;

or automatically, especially on the basis of the phase of flight, bymeans 15 which are incorporated into the device 1. Hence, when, after adefined duration in one phase of flight (for example during theapproach), in which validations have to be carried out, the operator hasnot (manually) called up the corresponding list, the means 15automatically order them to be presented on the screen 6.

The monitoring device 1 in accordance with the invention furtherincludes means 16 which are linked by a link 17 to the database 14 andwhich are intended automatically to correct the lists (“check lists”)upon a failure, so as to take account of the effects generated by thisfailure on these lists.

1. A device for monitoring a plurality of systems of an aircraft,comprising: a monitoring unit configured to monitor the systems and todetect a failure of at least one of the systems; a display configured todisplay information output by the monitoring unit including at least onefailure condition including a list of tasks to perform to address adetected failure including tasks already performed and tasks to beperformed; and an input device configured to input informationindicating that a task has been completed, wherein the monitoring unitincludes a deletion mechanism configured to delete the at least onefailure condition, and includes a recall mechanism configured to recalla previously deleted failure condition or to recall all previouslydeleted failure conditions.
 2. The device according to claim 1, furthercomprising: a highlighter configured to highlight a next task to beperformed.
 3. The device according to claim 1, wherein the displaydisplays at least one indicator indicating that all of the tasks in thelist of tasks have been performed.
 4. The device according to claim 1,wherein the display displays a block diagram of a system correspondingto the detected failure.
 5. The device according to claim 4, wherein thedisplay highlights a component of the system corresponding to thedetected failure.
 6. The device according to claim 1, wherein themonitoring unit includes a selection mechanism configured to select atleast one of said at least one failure condition, and wherein thedisplay displays the list of tasks corresponding to the selected failurecondition.
 7. The device according to claim 6, wherein the monitoringunit includes an undo mechanism configured to undo the selected failurecondition, and wherein the monitoring unit includes a recall mechanismconfigured to recall the undone failure condition.
 8. The deviceaccording to claim 1, wherein the monitoring unit includes an informingmechanism configured to manually inform the monitoring unit about afailure that occurred and that was not detected by the monitoring unit,and includes an interrogation mechanism configured to instruct thedisplay to display a list of tasks corresponding to the failure thatoccurred and that was not detected by the monitoring unit.
 9. The deviceaccording to claim 1, wherein the monitoring unit includes a selectionmechanism configured to request additional information corresponding tothe at least one failure condition, and the display displays theadditional information when the selection mechanism is selected.
 10. Thedevice according to claim 1, wherein the monitoring unit generatesdeferred procedures to be performed, and the display displays thedeferred procedures.
 11. A device for monitoring a plurality of systemsof an aircraft, comprising: means for monitoring the systems and todetect a failure of at least one of the systems; means for displayinginformation output by the monitoring means including at least onefailure condition including a list of tasks to perform to address adetected failure including tasks already performed and tasks to beperformed; and means for inputting information indicating that a taskhas been completed, wherein the monitoring means includes a means fordeleting the at least one failure condition, and includes a means forrecalling a previously deleted failure condition or for recalling allpreviously deleted failure conditions.
 12. The device according to claim11, further comprising: means for highlighting a next task to beperformed.
 13. The device according to claim 11, wherein the displaymeans displays at least one means for indicating that all of the tasksin the list of tasks have been performed.
 14. The device according toclaim 11, wherein the display means displays a block diagram of a systemcorresponding to the detected failure.
 15. The device according to claim14, wherein the display means highlights a component of the systemcorresponding to the detected failure.
 16. The device according to claim11, wherein the monitoring means includes a means for selecting at leastone of said at least one failure condition, and wherein the displaymeans displays the list of tasks corresponding to the selected failurecondition.
 17. The device according to claim 16, wherein the monitoringmeans includes a means for undoing the selected failure condition, andwherein the monitoring means includes a means for recalling the undonefailure condition.
 18. The device according to claim 11, wherein themonitoring means includes a means for manually informing the monitoringmeans about a failure that occurred and that was not detected by themonitoring means, and includes a means for instructing the display meansto display a list of tasks corresponding to the failure that occurredand that was not detected by the monitoring means.
 19. The deviceaccording to claim 11, wherein the monitoring means includes a means forrequesting additional information corresponding to the at least onefailure condition, and the display means displays the additionalinformation when the additional information is requested.
 20. The deviceaccording to claim 11, wherein the monitoring means generates deferredprocedures to be performed, and the display means displays the deferredprocedures.
 21. A device for monitoring a plurality of systems of anaircraft, comprising: a monitoring unit configured to monitor thesystems and to detect a failure of at least one of the systems; adisplay configured to display information output by the monitoring unitincluding at least one failure condition including a list of tasks toperform to address a detected failure including tasks already performedand tasks to be performed; and an input device configured to inputinformation indicating that a task has been completed, wherein themonitoring unit includes a selection mechanism configured to select atleast one of said at least one failure condition, an undo mechanismconfigured to undo the selected failure condition, and a recallmechanism configured to recall the undone failure condition.
 22. Thedevice of claim 21, wherein the display displays the list of taskscorresponding to the selected failure condition.
 23. A device formonitoring a plurality of systems of an aircraft, comprising: means formonitoring the systems and to detect a failure of at least one of thesystems; means for displaying information output by the monitoring meansincluding at least one failure condition including a list of tasks toperform to address a detected failure including tasks already performedand tasks to be performed; and means for inputting informationindicating that a task has been completed, wherein the monitoring meansincludes a means for selecting at least one of said at least one failurecondition, the monitoring means includes a means for undoing theselected failure condition, and the monitoring means includes a meansfor recalling the undone failure condition.
 24. The device of claim 23,wherein the means for displaying displays the list of taskscorresponding to the selected failure condition.